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Attn: 

SSA 

Houston 

Attn: 

SSA 

San Francisco 

Attn: 

SSA 

WMFO 

Attn: 

SSA 



From: NSD/CID/CITAC 

Contact: SSA I I b6 

|_| b7C 

Approved By: Geide Ken M 

-I 

Drafted By: Lug 

Case ID #: 288-^Q-1242560-$/pending) 

Title: OPERATION SOLAR SUNRISE 
CITA MATTERS 
00:HQ 

Synopsis: This communication sets forth additional investigative 

leads to be addressed regarding captioned subject. 

(U) ClasSifiedBy: 45U J J^HPAO/D5 

Reason 

Deglasgxfy On: 

Administrative: Receiving field offices should reference Bureau 

EC to All Field Offices, dated 2/9/98; Bureau EC to All Field 
Offices dated 2/12/98. „ . , 

Referral/Consult 

Details: (S) Referenced matter continues to receive the highest 
level of attention and scrutiny from the Department of Defense 
and the National Security Council. The Attorney General has 
ordered all necessary DOJ resources be afforded to this matter, 
and all avenues of investigation be pursued. FBIHQ will continue 
to provid e overall coord ination, analytical support and liaison 
with DOD, p ander umbrella case 288-HQ-1242560. The 

following leads delineate specific areas of investigative 
responsibility for receiving field offices, under which field 
office of origin (00)cases may be opened. Investigation and leads 
should be expeditiously addressed and telephonically provided to 

x, , ml vT ' h’I t ^ 

SEGRgT I , ' ' ' | I' 1 '. 





To: Boston From: NSD/CID/CITAC 

Re: 288-NQ-1242560, 02/18/1998 


SSA | __| or Acting Unit Chief _ 

I These telephonic contacts should be 
followed up with appropriate paper communications. 





To: Boston From: NSD/CID/CITAC 

Re: 288-NQ-1242560, 02/18/1998 


LEAD (s) : 

Set Lead 1: 

BOSTON 

AT BOSTON, MA Referral/Consult 


Set Lead 2: 

HOUSTON 

AT HOUSTON. TX 


Referral/Consult 



SAN FRANCISCO 

AT SAN FRANCISCO. CA 

^ /£§() Will open an 00 case into intrus ions in to 
department of defense domain name sarvars_and I 


(U) £)3^Will continue T-III monitoring of 
perfor m analysis of content and provide results to CITAC. Will 
obtain I 

_and. conduct appropriate analysis. 
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To: Boston From: NSD/CID/CITAC 

Re: 288-NQ-1242560, 02/18/1998 


< ul Mwill initiate surveillance of subjects, as deemed 
appropriate. 


(U) 


/g/will seek amended T-ITT ordg-r or 1 Bhhpr frnm 


b3 


(U) 


X will 


consider use of 


ho 

b7C 

b7E 


Set Lead 4: 

WMFO 


AT WASHINGTON. DC! 


through |_ 


_(U) {)g^Will contact and interview,_ 

I regarding t race of Internet session accessed 


b3 

Obtain all relevant records 

Referral/Consult 


^ (^3Will continue investigation into 
coordinate with NCIS. 


and 


b6 

b7C 


< u > X wi11 obtain and serve 2703 D order on University of 
Maryland systems administrator to determine source of hacker tool 
files. Conduct appropriate investigation to determine user 
account holding and accessing files, date files were accessed 
and locations to whd.ch they were transferred. Will obtain trap 
and trace order for 


b3 


Referral/Consult 


CC: 


1 - Mr. Geide 

1 -I- 


bo 

b7C 




To: Boston From: NSD/CID/CITAC 

Re: 288-NQ-1242560, 02/18/1998 


1 - Mr. 
1 - Mr. 


b6 

b7C 


♦♦ 
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